End-of-order Wi-Fi 6 Universal (UTP) high-density indoor access point - three radios with the option of dual 5 GHz operation, 4x4 MU-MIMO, a 2.5 Gigabit Ethernet uplink plus a second Gigabit port for PoE diversity, and 802.3at PoE. The Universal family runs FortiGuard UTP services at the edge and is managed by any FortiGate or by FortiLAN Cloud. New hardware is no longer available from stock; existing fleets stay supported and renewable through 2030. For new deployments the direct successor is the Wi-Fi 7 FortiAP 441K.
The FortiAP U431F is a high-density Wi-Fi 6 (802.11ax) Universal access point built for demanding indoor spaces - large offices, lecture halls, conference centres and busy retail. Its tri-radio design runs two 4x4 client radios that can operate as 2.4 GHz + 5 GHz + 5 GHz for extra capacity, or as dual 5 GHz with a dedicated scanning radio for always-on security, and an integrated BLE radio handles beacons and locationing. As part of the Universal (UTP) family it can run FortiGuard Universal Threat Protection services at the AP itself, and is managed by any FortiGate or by FortiLAN Cloud - with no separate per-AP management license. The U431F reached end of order on 23 October 2025 and is no longer available from stock; Fortinet continues support, firmware and FortiCare renewals through 2030, so existing fleets stay protected. For new rollouts the direct replacement is the Wi-Fi 7 FortiAP 441K, which keeps the same 4x4 internal-antenna indoor form factor and adds the 6 GHz band, 4096-QAM and dual 10 GbE uplinks; the Wi-Fi 6E FortiAP 431G is a close interim step. Modern FortiAP F- and K-series natively support UTP, so the Universal distinction is no longer needed on current hardware.
The U431F is legacy and no longer available from stock – here is how to renew what you own or move to its current-generation successor.
| Lifecycle | End of order 23 Oct 2025 · end of support 23 Oct 2030 (renewable) · new hardware no longer in stock |
| Type | Indoor access point, Wi-Fi 6 (802.11ax) Universal / UTP, dual 5 GHz capable |
| Radios | 3 + BLE: 2.4 GHz + 5 GHz + 5 GHz, or dual 5 GHz + dedicated scanning |
| Spatial streams | 4x4 MU-MIMO on both client radios (UL & DL), OFDMA, BSS coloring, TWT |
| Max data rate | 4804 Mbps + 4804 Mbps + 300 Mbps, ~9.9 Gbps aggregate |
| Channel width | Up to 160 MHz (5 GHz); 40 MHz (2.4 GHz) |
| Antennas | 10 internal + BLE internal |
| Ethernet | 1x 100/1000/2500 Base-T RJ45 + 1x 10/100/1000 Base-T RJ45 (PoE diversity) + USB + RS-232 |
| Power over Ethernet | Dual redundant ports: 802.3at, or dual 802.3af |
| Client capacity | Up to 512 clients per serving radio |
| SSIDs | Up to 16 (24 if the third radio serves clients) |
| Security | WPA3 / WPA2 / WPA, 802.1X, captive portal, WIPS / WIDS, dedicated scan |
| UTP capable | Yes - runs FortiGuard UTP services at the AP edge |
| Management | FortiGate WLAN controller or FortiLAN Cloud |
| Power / dimensions | 24.5 W max · 8.46 x 8.46 x 2.26 in · 2.6 lb (1.2 kg) · limited lifetime warranty |
Source: official Fortinet FortiAP UTP (U-Series) datasheet (FAP-U431F column).
Download the full datasheetHow the FortiAP U431F lines up against its current-generation replacements.
The FortiAP U431F is end-of-order. Its direct successor, the FortiAP 441K, keeps the same form factor on a newer Wi-Fi generation.
Mounts and power for the FortiAP U431F.
The FortiAP U431F reached end of order on 23 October 2025 and is classified as legacy. New hardware is no longer available from stock, but Fortinet continues firmware, security updates and FortiCare support through 23 October 2030, so existing deployments remain fully protected.
The direct successor is the Wi-Fi 7 FortiAP 441K – the same 4×4 internal-antenna indoor form factor, adding the 6 GHz band, 4096-QAM and dual 10 GbE uplinks. The Wi-Fi 6E FortiAP 431G is a close interim step. Modern FortiAP F- and K-series natively support UTP, so the Universal distinction is no longer needed on current hardware.
It is a tri-radio Wi-Fi 6 (802.11ax) AP with 4×4 MU-MIMO on both client radios, reaching up to 4804 Mbps on each 5 GHz radio and 300 Mbps on the third radio – about 9.9 Gbps aggregate – with up to 512 clients per serving radio. It can run dual 5 GHz for extra capacity.
Universal APs can run FortiGuard Universal Threat Protection services at the AP edge and be managed by a FortiGate or by FortiLAN Cloud. On current FortiAP F- and K-series this capability is built in, so the separate Universal model is no longer required.
Existing FortiCare contracts remain valid and renewable through 2030. FortiCare and RMA renewal SKUs for the U431F are currently out of stock on the site – contact us and we will source the renewal you need. We are an authorized Fortinet Select Partner and deliver licensing electronically, worldwide.
